Experimental realization of order-finding with a quantum computer 
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We report the realization of a nuclear magnetic resonance (NMR) quantum computer which 
combines the quantum Fourier transform (QFT) with exponentiated permutations, demonstrating a 
quantum algorithm for order-finding. This algorithm has the same structure as Shor's algorithm and 
its speed-up over classical algorithms scales exponentially. The implementation uses a particularly 
well-suited five quantum bit molecule and was made possible by a new state initialization procedure 
and several quantum control techniques. 



The quest for the experimental realization of quan- 
tum computers has culminated in the creation of spe- 
cific entangled quantum states, most recently with four 
quantum bits (qubits) using trapped ions and seven 
qubits |2| u sing liquid state nuclear magnetic resonance 
(NMR) [S|M| , and in the successful implementation of 
Grover's search algorithm and the Deutsch-Jozsa 

algorithm ]^-pX[| on two, three, and five qubit systems 
(see for additional references). 

However, a key step which remains yet to be taken is a 
computation with the structure of Shor's factoring algo- 
rithm 13 1, which appears to be common to all quan- 
tum algorithms that achieve exponential speed-up [ p^ . 
This structure involves two components: exponentiated 
unitary operations and the quantum Fourier transform 
(QFT). Implementing these components is challenging 
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uire not just the creation of static en- 
but also precise dynamic quantum 
control over the evolution of multiple entangled qubits, 
over the course of tens to hundreds of quantum gates 
for the smallest meaningful instances of this class of al- 
gorithms. The evolution of the states is precisely where 
NMR quantum computers appear to have an exponential 
advantage over classical computers . 

Here we report the experimental implementation of a 
quantum algorithm for finding the order of permutation 
^ , P^Jl6| ; its structure is the same as for Shor's factor- 
ing algorithm and it scales exponentially faster than any 
classical algorithm for the problem. The realization of 
this algorithm was made possible by the synthesis of an 
unusual molecule with five pairwise coupled, easily ad- 
dressable ^^F spins, and by the introduction of two new 
techniques: an efficient and effective temporal labeling 
scheme for initial state preparation, and a method for 
precise simultaneous rotations of multiple spins at nearby 
frequencies JTzt . 

The order of a permutation tt can be understood via 
the following analogy: imagine 2" rooms and 2" one-way 
passages connecting the rooms, with exactly one entrance 
and one exit in each room (for some rooms, the passage 
going out may loop back to the room itself). These rules 



ensure that when making transitions from one room to 
the next going through the passages, you must eventu- 
ally come back to the room you started from. Define the 
order r as the minimum number of transitions needed to 
return to the starting room y, where r may depend on 
y. The order- finding problem is to determine r solely by 
trials of the type "make x transitions using tt starting 
from room y and check which room you are in" . Math- 
ematically, we will describe such trials as queries of an 
oracle or black box which outputs 7T^{y). The goal then 
is to find r with the least possible number of queries. 

Cleve showed that order-finding using no other re- 
source or information than the oracle is hard both for 
deterministic and probabilistic classical computers [ p^ , 
i.e. there exists a lower bound on the number of oracle 
queries needed for order-finding which is exponential in 
n. In contrast, this problem can be solved much faster 
on a quantum computer, because finding the order of 
7r(j/) is equivalent to finding the period of the function 
f{x) = TT^iy). The latter can be done with a constant 
probability of success in a constant number of function 
evaluations using a generalization of Shor's quantum al- 
gorithm This is because, in some sense, the quan- 
tum computer can make transitions to many rooms at 
once. Thus, in terms of the number of oracle queries re- 
quired, the gap between the quantum and classical case 
is exponential . 

We experimentally implemented the order-finding 
quantum algorithm to determine the order of a repre- 
sentative subset of all 4! = 24 permutations on 4 ele- 
ments, including instances of each possible order. It can 
be proven that the best classical algorithm needs two 
queries of the oracle to determine r with certainty, and 
that using only one query of the oracle, the probability of 
finding r using a classical algorithm can be no more than 
1/2. One optimal classical strategy is to first ask the or- 
acle for the value of Tr^{y)'. when the result is y, r must 
be 1 or 3; otherwise r must be 2 or 4. In cither case, the 
actual order can be guessed only with probability 1/2. In 
contrast, the probability of success is 0.55 with only 
one oracle-query using the quantum algorithm on a single 
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quantum computer. In fact, since in our implementation 
an ensemble of 10^^ quantum computers contribute 
to the signal, our output data enables the order to be 
deduced with virtual certainty. 

The quantum algorithm is as follows (see Fig. |l| for the 
quantum circuit): (0) initialize the first register of three 
qubits in the state |0) and set the second register of two 
qubits to 1 2/1 2/0) or for short \y), where yiyo is the binary 
representation of the number y; (1) apply a Hadamard 
transform H to qubits 1, 2 and 3, which puts the first reg- 
ister in the state \x) = (|0) + |1) + . . . + |7))/\/8; (2) apply 
the unitary transformation \x)\y) \x)\7r^{y)), which is 
the oracle query; (3) perform the quantum Fourier trans- 
form (QFT) on the first three qubits (4) measure 
the first three qubits — for an ideal single quantum com- 
puter, the possible measurement outcomes m and their 
probabilities are listed in Fig. ^ for each possible value 
of r (the translation to ensemble averaged measurements 
is discussed later); (5) depending on the measurement 
outcome, make a probabilistic guess r' as shown also in 
Fig. H It is easy to verify that Pr[r' = r] is ~ 0.55, 
regardless of the probability distribution of r or tt. 
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FIG. 1. The quantum circuit for order-finding. Horizontal 
lines represent qubits; time goes from left to right. The boxed 
90 and 45 represent rotations about z over those angles. A 
black dot connected to a box on another horizontal line indi- 
cates that the boxed operation is executed if and only if the 
qubit indicated by the black dot is The transformation 
^ 1^)1''^^ (y)) (step 2) was implemented in three steps, 
using the fact that tt^ = tt^^tt^^^tt'*^^ , where X2X1X0 is the 
binary representation of x. Each of these three operations 
is a permutation on qubits 4 and 5, controlled by qubits 3, 2 
and 1 respectively. The details of the controlled permutations 
depend on vr. The QFT (step 3) was implemented using the 
construction of ji^] , which swaps the output state of qubits 1 
and 3 compared to the definition of the QFT. 
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FIG. 2. (Left) The probabilities that the measurement re- 
sult m is 0, 1, . . . , or 7, given r (for an ideal single quantum 
computer). (Right) The optimal probabilities with which to 
make a guess r' for r, given m. 

In order to implement this algorithm, we custom syn- 
thesized a molecule containing five ^^F spins which 
served as the qubits (Fig. When placed in a static 



magnetic field, each spin has two discrete energy eigen- 
states, spin-up, |0), and spin-down, |1), described by the 
Hamiltonian hujiizi, where uji is the transition frequency 
between the spin-up and spin-down states and is the z 
component of the spin angular momentum operator. In 
this molecule, all five spins are remarkably well-separated 
in frequency, coi, and are mutually coupled with a cou- 
pling Hamiltonian of the form 27r?i Jy/zi/zj (Fig. ^). The 
linewidths of the NMR transitions are ~ 1 Hz, so the 
T2 quantum coherence times of the spins were at least 
^ 0.3 s. The Ti time constants were measured to be 
between 3 and 12 s. 






F5 F4 


F3 


F2 


Fi: 


14.5 6.5 


25 


-114 


F2: 17107 


13 2 


80 




F3: 22528 


4 2.5 






F4: 37195 


41 






Fs: 47113 









FIG. 3. Structure of the pentafluorobutadienyl cyclopen- 
tadienyldicarbonyliron complex, with a table of the relative 
chemical shifts of the ^^F spins at 11.7 T [Hz], and the 
J-couplings [Hz]. A total of 76 out of the 80 lines in the 
5 spectra are resolved. 

This nuclear spin system was used at room tempera- 
ture. The thermal equilibrium state is then highly mixed, 
i.e. the probabilities that each spin is |0) or |1) differ by 
only 1 part in ~ 10^, which is not a suitable initial state 
for a quantum computation | p2[ . Instead, as has previ- 
ously been shown, an "effective pure" initial state must 
be created, in which only the spins in the 1 00000) state 
produce a net output signal |^,^. We devised a new 
procedure to prepare effective pure states which is best 
understood in terms of product operators |Q . The equi- 
librium density matrix for a homonuclear spin system is 
a sum of n = 5 terms: IIIIZ + IIIZI+IIZII+IZIII+ 
ZIIII. The desired effective pure state density matrix is 
IIIIZ +... + ZIIII + IIIZZ + ... + ZZIII + IIZZZ + 
... + ZZZII + IZZZZ +... + ZZZZI + ZZZZZ, a sum 
of 2" — 1 = 31 terms. Using short sequences of controUed- 
NOT operations (C^j flips spin j if and only if i is |1)), 
the five terms obtained in equilibrium can be transformed 
into different sets of five terms. For homonuclear spin 
systems, the summation of only [(2" — l)/n] = 7 dif- 
ferent experiments thus suffices to create all 31 terms, 
although it may be advantageous to use slightly more 
experiments in order to keep the preparation sequences 
short. In contrast, both conventional temporal averag- 
ing and later improvements Q require up to 2" — 1 
experiments, and furthermore suffer from higher com- 
plexity and/or a lower signal-to- noise ratio. The over- 
head is still exponential though, so even this improved 
technique is not scalable. But importantly, a scalable 
approach to NMR quantum computation exists psj ] and 
may become practical if large polarization enhancements 
can be achieved. We used 9 experiments, giving a to- 
tal of 45 product operator terms. The 14 extra terms 
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were canceled out pairwise, using NOT (N^) operations 
to flip the sign of selected terms. The 9 state preparation 
sequences were 

C51C45C24N3, C14C31C53N2, C54C51N2, 
C31C43C23N5, C21C52C45C34, C53C25C12N4, 
C12C15C13C41, C32C13C25N4, C35C23N1. 
The resulting data are remarkably clean, as illustrated 
in Fig. ^. After the state preparation, only the 0000 line 
should remain visible, reflecting that only molecules with 
all spins in the ground state contribute to the signal. This 
is clearly observed in the measured spectra. 
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FIG. 4. All spectra shown here and in Fig. q display the 
real part of the spectrum in the same arbitrary units, and 
were obtained without phase cycling or signal- averaging (ex- 
cept for Fig. ^c, where 16 identical scans were averaged). A 
0.1 Hz filter was applied. Frequencies are in units of Hz with 
respect to uji. a, the spectrum of spin 1 in equilibrium. The 
16 lines are due to shifts in the transition frequency ui by 
±Jij/2, depending on whether spin j is in |0) or |1). In equi- 
librium, all the 32 states are nearly equally populated, hence 
the 16 lines in each spectrum have virtually the same inten- 
sity. Taking into account the sign and magnitude of the Ji.j, 
the 16 lines in the spectrum of spin 1 can be labeled as shown, 
b, the same spectrum when the spins are in an effective pure 
state. Only the line labeled 0000 is present. 

This effective pure state served as the initial state for 
the order-flnding algorithm. The actual computation was 
realized via a sequence of ~ 50 to '--^ 200 radio-frequency 
(RF) pulses, separated by time intervals of free evolu- 
tion under the Hamiltonian, for a total duration of ^ 50 
to ~ 500 ms, depending on tt. The pulse sequences for 
the order-finding algorithm were designed by translating 
the quantum circuits of Fig. ^ into one- and two-qubit 
operations, employing several simplification methods [Q. 
These pulse sequences were implemented on a custom 
modified four-channel Varian Unity INOVA spectrome- 
ter, and a Nalorac HFX probe. The frequency of one 
channel was set at {uj2 +'^3)/2, and the other three chan- 
nels were set on the resonance of spins 1,4 and 5. The 
chemical shift evolutions of spins 2 and 3 were calcu- 
lated with the help of a time-counter, which kept track 
of the time elapsed from the start of the pulse sequence. 
On-resonance excitation of spins 2 and 3 was achieved 
using phase-ramping techniques pq]. All pulses were 
spin-selective and Hermite shaped ]23|. Rotations about 
the z-axis were implemented by adjusting the phases of 
the subsequent pulses p3|. Unintended phase shifts p^] 



of spins i during a pulse on spin j ^ i were calculated 
and accounted for by adjusting the phase of subsequent 
pulses. During simultaneous pulses, the effect of these 
phase shifts was largely removed by shifting the frequency 
of the pulses via phase-ramping. The pulse frequency 
shifts are designed such that they track the shifting spin 
frequencies and thereby greatly improve the accuracy of 
the simultaneous rotations of two or more spins 0. This 
technique circumvents the need to avoid simultaneous 
pulses at nearby frequencies [ p8[ , and thus permits more 
efficient pulse sequences. 

Upon completion of the pulse sequence, the states of 
the three spins in the first register were measured and 
the order r was determined from the read-out. Since 
an ensemble of quantum computers rather than a sin- 
gle quantum computer was used, the measurement gives 
the bitwise average values of mi{i = 1,2,3), instead of 
a sample of m = 771177127713 with probabilities given in 
Fig. H 1^^. Formally, measurement of spin i returns 
Oi = 1 — 2{mi) = 2Tr(/9/^i), where p is the final density 
operator of the system. The Oi are obtained experimen- 
tally from integrating the peak areas in the spectrum of 
the magnetic signal of spin i after a 90° read-out pulse 
on spin i, phased such that positive spectral lines corre- 
spond to positive Oi. The theoretically predicted values 
of Oi {i = 1, 2, 3) for each value of r follow directly from 
the probabilities for m in Fig. |^. For reference, we also 
include the values of O4 and O5 (for y = 0; ii y ^ 0, O4 
and O5 can be negative): for the case r = 1 the Oi are 
1, 1, 1, 1, 1; for r = 2 they are 1, 1, 0, 1, 0; and for r = 4 
they are 1,0,0,0,0. For r = 3, the Oi {i — 1,2,3) are 
0, 1/4,5/16, and O4 and O5 can be 0, ±1/4 or ±1/2, de- 
pending on y. The value of r can thus be unambiguously 
determined from the spectra of the three spins in the 
first register. This was confirmed experimentally by tak- 
ing spectra for these three spins, which were in excellent 
agreement with the theoretical expectations. 

In fact, the complete spectrum of any one of the first 
three spins uniquely characterizes r by virtue of extra 
information contained in the splitting of the lines. For 
the spectrum of spin 1 the values of Oi given above in- 
dicate that for r = 1, only the 0000 fine (see Fig. ||) will 
be visible since spins 2 — 5 are all in |0). Furthermore, 
this line should be absorptive and positive since spin 1 
is also in |0). Similarly, for r = 2 the 0000,0001,0100 
and 0101 lines are expected to be positive, and for r = 4 
all 16 lines should be positive. Finally, for r — 3, the 
net area under the lines of spin 1 should be zero since 
Oi — 0, although most individual lines are expected to 
be non-zero and partly dispersive. These unambiguous 
characteristics are refiected in the data. Results for four 
representative permutations are presented in Fig. ^. In 
all cases, the spectrum is in good agreement with the pre- 
dictions, both in terms of the number of lines, and their 
position, sign and amplitude. Slight deviations from the 
ideally expected spectra are attributed mostly to incom- 
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plete refocusing of undesired coupled evolutions and to 
decoherence. 
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FIG. 5. Spectra of spin 1 acquired after executing the 
order-finding algorithm. The respective permutations are 
shown in inset, with the input element highlighted. The 16 
marks on top of each spectrum indicate the position of the 
16 lines in the thermal equilibrium spectrum. The transfor- 
mation K-> |7r^(i/)) is realized by a, r = 1: P54 C35 
P54 C35 P34 (Pij rotates spin j by 90° about z if and only if 
spin i is b, r = 2: C35. c, r = 3: C32 C25 C32 C21 P14 
C51 p14 C51 P54 C21 P15 C41 PJs C41 P45. (this sequence 
does the transformation n^{y) for y = 2 only; sequences for 
r = 3 that would work for any y are prohibitively long), d, 
r = 4: C24 P34 P54 C35 P54. Each transformation was tested 
independently to confirm its proper operation. 

The success of the order-finding experiment required 
the synthesis of a molecule with unusual NMR prop- 
erties and the development of several new methods to 
meet the increasing demands for control over the spin 
dynamics. The major difficulty was to address and con- 
trol the qubits sufficiently well to remove undesired cou- 
plings while leaving select couplings active. Furthermore, 
the pulse sequence had to be executed within the coher- 
ence time. Clearly, the same challenges will be faced in 
moving beyond liquid state NMR, and we anticipate that 
solutions such as those reported here will be useful in fu- 
ture quantum computer implementations, in particular 
in those involving spins, such as solid state NMR [ pO[ , 
electron spins in quantum dots pl[ and ion traps Q . 
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